​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：RCE
描述：Automatic thesauri backups from RCE PoolParty
URL：https://github.com/MinhDuong2571/DNSrce

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Havoc SSRF chained with RCE to get access inside the host machine of havoc listener.
URL：https://github.com/Disturbante/Havoc_SSRF_RCE_PoC

标签：#RCE
GitHub
GitHub - Disturbante/Havoc_SSRF_RCE_PoC: Havoc SSRF chained with RCE to get access inside the host machine of havoc listener.
GitHub - Disturbante/Havoc_SSRF_RCE_PoC: Havoc SSRF chained with RCE to get access inside the host machine of havoc listener.
Havoc SSRF chained with RCE to get access inside the host machine of havoc listener. - Disturbante/Havoc_SSRF_RCE_PoC
RCE
GitHub监控消息提醒！！！

更新了：漏洞扫描
描述：fizz-poc是一个被动流量漏洞扫描器
URL：https://github.com/fizzgate/fizz-poc

标签：#漏洞扫描
GitHub
GitHub - fizzgate/fizz-poc: fizz-poc是一个被动流量漏洞扫描器
GitHub - fizzgate/fizz-poc: fizz-poc是一个被动流量漏洞扫描器
fizz-poc是一个被动流量漏洞扫描器. Contribute to fizzgate/fizz-poc development by creating an account on GitHub.
漏洞扫描
GitHub监控消息提醒！！！

更新了：红队
描述：收集一些红队 Dify Workflow。
URL：https://github.com/din4e/DifyDSL4RadTeam

标签：#红队
GitHub
GitHub - din4e/DifyDSL4RedTeam: 收集一些红队 Dify Workflow。
GitHub - din4e/DifyDSL4RedTeam: 收集一些红队 Dify Workflow。
收集一些红队 Dify Workflow。. Contribute to din4e/DifyDSL4RedTeam development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：RCE
描述：RCEA tuorial data and code
URL：https://github.com/pinguinjay/RCEA

标签：#RCE
GitHub
GitHub - pinguinjay/RCEA: RCEA tuorial data and code
GitHub - pinguinjay/RCEA: RCEA tuorial data and code
RCEA tuorial data and code. Contribute to pinguinjay/RCEA development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Baicells Router RCE Flaw with ping injection.
URL：https://github.com/hailoperator/Baicells-Router-Exploit

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Asus Router RCE Flaw (IOT)
URL：https://github.com/hailoperator/Asus-Router-RCE-Flaw

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：GitHub Entreprise Server SAML authentication bypass (CVE-2025-23369) exploit
URL：https://github.com/hakivvi/CVE-2025-23369

标签：#CVE-2025
GitHub
GitHub - hakivvi/CVE-2025-23369: GitHub Entreprise Server SAML authentication bypass (CVE-2025-23369) exploit
GitHub - hakivvi/CVE-2025-23369: GitHub Entreprise Server SAML authentication bypass (CVE-2025-23369) exploit
GitHub Entreprise Server SAML authentication bypass (CVE-2025-23369) exploit - hakivvi/CVE-2025-23369
CVE
GitHub监控消息提醒！！！

更新了：代码审计
描述：一款基于Zjackky/CodeScan的轻量级匹配Sink点并AI审计的代码审计扫描器
URL：https://github.com/Zacarx/AICodeScan

标签：#代码审计
GitHub
GitHub - Zacarx/AICodeScan: 一款基于Zjackky/CodeScan的轻量级匹配Sink点并AI审计的代码审计扫描器
GitHub - Zacarx/AICodeScan: 一款基于Zjackky/CodeScan的轻量级匹配Sink点并AI审计的代码审计扫描器
一款基于Zjackky/CodeScan的轻量级匹配Sink点并AI审计的代码审计扫描器. Contribute to Zacarx/AICodeScan development by creating an account on GitHub.
代码审计
GitHub监控消息提醒！！！

更新了：RCE
描述：a tool to explore RCE through LFI + phpinfo()
URL：https://github.com/x86-69/lfi2rce_phpinfo

标签：#RCE
GitHub
GitHub - x86-69/lfi2rce_phpinfo: a go tool to explore RCE through LFI + phpinfo()
GitHub - x86-69/lfi2rce_phpinfo: a go tool to explore RCE through LFI + phpinfo()
a go tool to explore RCE through LFI + phpinfo(). Contribute to x86-69/lfi2rce_phpinfo development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：漏洞扫描
描述：自动化扫描利器，指纹识别更精准，漏洞扫描更全面
URL：https://github.com/CRlife/Rscan

标签：#漏洞扫描
GitHub
GitHub - CRlife/Rscan: 自动化扫描利器，指纹识别更精准，漏洞扫描更全面
GitHub - CRlife/Rscan: 自动化扫描利器，指纹识别更精准，漏洞扫描更全面
自动化扫描利器，指纹识别更精准，漏洞扫描更全面. Contribute to CRlife/Rscan development by creating an account on GitHub.
漏洞扫描
GitHub监控消息提醒！！！

更新了：webshell
描述：Pseudo webshell c2 aggregator
URL：https://github.com/GIT-MSK/Stuq2

标签：#webshell
GitHub
GitHub - GIT-MSK/Stuq2: Pseudo webshell c2 aggregator
Pseudo webshell c2 aggregator. Contribute to GIT-MSK/Stuq2 development by creating an account on GitHub.
webshell
GitHub监控消息提醒！！！

更新了：漏洞挖掘
描述：xss漏洞挖掘插件
URL：https://github.com/Yn8rt/Jssx

标签：#漏洞挖掘
GitHub
GitHub - Yn8rt/Jssx: xss漏洞挖掘插件
xss漏洞挖掘插件. Contribute to Yn8rt/Jssx development by creating an account on GitHub.
漏洞挖掘
GitHub监控消息提醒！！！

更新了：漏洞验证
描述：针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破
URL：https://github.com/kingjly/Directory-Traversal-Scanner

标签：#漏洞验证
GitHub
GitHub - kingjly/Directory-Traversal-Scanner: Directory Traversal Scanner 是一个高性能的目录遍历漏洞扫描工具，专门用于检测和验证 Web 应用程序中的路径遍历漏洞。通过异步并发扫描和智能…
GitHub - kingjly/Directory-Traversal-Scanner: Directory Traversal Scanner 是一个高性能的目录遍历漏洞扫描工具，专门用于检测和验证 Web 应用程序中的路径遍历漏洞。通过异步并发扫描和智能…
Directory Traversal Scanner 是一个高性能的目录遍历漏洞扫描工具，专门用于检测和验证 Web 应用程序中的路径遍历漏洞。通过异步并发扫描和智能 WAF 绕过技术，帮助安全研究人员快速发现潜在的安全隐患。Directory Traversal Scanner is a high-performance security tool designed to detect ...
漏洞验证
GitHub监控消息提醒！！！

更新了：信息收集
描述：一个信息收集工具，集合目录扫描（跳过200的伪404），ip端口扫描协议识别
URL：https://github.com/jayl0n9/iscan-go

标签：#信息收集
GitHub
GitHub - jayl0n9/iscan-go: 一个信息收集工具，集合目录扫描（跳过200的伪404），ip端口扫描协议识别
GitHub - jayl0n9/iscan-go: 一个信息收集工具，集合目录扫描（跳过200的伪404），ip端口扫描协议识别
一个信息收集工具，集合目录扫描（跳过200的伪404），ip端口扫描协议识别. Contribute to jayl0n9/iscan-go development by creating an account on GitHub.
信息收集
GitHub监控消息提醒！！！

更新了：RCE
描述：MCPTool Basic PlaceholderAPI Expansion RCE for Pentesting and Testing
URL：https://github.com/wrrulosdev/mcptool-papi-rce

标签：#RCE
GitHub
GitHub - wrrulosdev/mcptool-papi-rce: MCPTool Basic PlaceholderAPI Expansion RCE for Pentesting and Testing
GitHub - wrrulosdev/mcptool-papi-rce: MCPTool Basic PlaceholderAPI Expansion RCE for Pentesting and Testing
MCPTool Basic PlaceholderAPI Expansion RCE for Pentesting and Testing - wrrulosdev/mcptool-papi-rce
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：MCPTool Spigot RCE Plugin for Pentesting and Testing
URL：https://github.com/wrrulosdev/mcptool-spigot-rce

标签：#RCE
GitHub
GitHub - wrrulosdev/mcptool-spigot-rce: MCPTool Spigot plugin RCE for Pentesting and testing
MCPTool Spigot plugin RCE for Pentesting and testing - wrrulosdev/mcptool-spigot-rce
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Unauthenticated Remote Code Execution (RCE) - Poultry Farm Management System v1.0
URL：https://github.com/hacksudo/Unauthenticated-Remote-Code-Execution-RCE-Poultry-Farm-Management-System-v1.0

标签：#RCE
GitHub
GitHub - hacksudo/Unauthenticated-Remote-Code-Execution-RCE-Poultry-Farm-Management-System-v1.0: Unauthenticated Remote Code Execution…
GitHub - hacksudo/Unauthenticated-Remote-Code-Execution-RCE-Poultry-Farm-Management-System-v1.0: Unauthenticated Remote Code Execution…
Unauthenticated Remote Code Execution (RCE) - Poultry Farm Management System v1.0 - GitHub - hacksudo/Unauthenticated-Remote-Code-Execution-RCE-Poultry-Farm-Management-System-v1.0: Unauthenticated...
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：📝 RCE - Remote Code Execution Detection Report (Windows VM)
URL：https://github.com/ToubaHam/RCE-Detection-Report

标签：#RCE
GitHub
GitHub - ToubaHam/RCE-Detection-Report: 📝 RCE - Remote Code Execution Detection Report (Windows VM)
GitHub - ToubaHam/RCE-Detection-Report: 📝 RCE - Remote Code Execution Detection Report (Windows VM)
📝 RCE - Remote Code Execution Detection Report (Windows VM) - ToubaHam/RCE-Detection-Report
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7
URL：https://github.com/suce0155/CVE-2024-2961_buddyforms_2.7.7

标签：#RCE
GitHub
GitHub - suce0155/CVE-2024-2961: CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7
GitHub - suce0155/CVE-2024-2961: CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7
CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7 - suce0155/CVE-2024-2961
RCE
Before
After
Back to Top